Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/4754ED7C16BF11EBB31D5A6AC4F9AE02.roa
File:                     4754ED7C16BF11EBB31D5A6AC4F9AE02.roa (raw, json)
Hash identifier:          AzDpfRzBUtomgLnjKPD/8OpUvxfEaOLl7f7ZXs6THbc=
Subject key identifier:   86:A8:CD:C6:3D:84:0F:B3:B9:B4:74:F6:1E:57:40:1C:3E:57:FC:97
Certificate issuer:       /CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
Certificate serial:       33E4
Authority key identifier: 4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/4754ED7C16BF11EBB31D5A6AC4F9AE02.roa
Signing time:             Sat 02 Mar 2024 15:20:58 +0000
ROA not before:           Sat 02 Mar 2024 15:20:58 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     138915
IP address blocks:        2404:4a00:5542:3a5::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl
                          rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 May 2024 15:06:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13284 (0x33e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
        Validity
            Not Before: Mar  2 15:20:58 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65e343da-2c4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:17:24:d8:fd:2e:ee:52:6d:00:bc:e8:38:74:
                    86:91:46:0f:a7:ea:c1:82:0f:2f:06:cb:64:45:62:
                    5d:b0:46:26:f0:c0:a6:35:fb:39:63:6d:30:16:4b:
                    ef:51:87:c3:0f:b1:df:d4:32:b1:e3:8f:4c:f4:0f:
                    93:09:c8:cc:46:0f:ee:1b:d4:0e:ae:04:e9:96:23:
                    2d:05:63:0c:2e:b8:31:cd:a7:a6:8c:e3:d0:37:d7:
                    f6:87:8b:aa:44:14:0a:ea:e2:24:53:5d:d7:10:65:
                    d5:bb:62:f2:39:67:49:6c:d7:7f:41:25:45:e0:6a:
                    3e:6e:2f:77:88:aa:4e:8b:4d:e2:0d:3c:4c:c9:6f:
                    7e:41:1c:ed:63:36:73:e4:15:20:f9:73:60:62:2e:
                    34:74:67:17:e0:70:fb:13:10:29:08:f9:16:71:1f:
                    33:4b:72:eb:3d:86:5f:33:65:b4:97:b6:37:3e:bf:
                    73:ef:a8:4b:5d:ea:42:5a:85:3f:65:d5:b7:2f:a1:
                    cb:8e:a6:94:d3:d6:2b:40:16:a2:01:62:d3:4d:98:
                    57:83:33:3d:2d:23:06:fd:e1:6b:68:4d:4b:47:1d:
                    52:78:3e:87:09:56:61:ec:ed:63:43:81:70:71:45:
                    09:49:b1:24:f4:27:7e:36:2f:fc:37:25:f0:6d:d3:
                    a9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A8:CD:C6:3D:84:0F:B3:B9:B4:74:F6:1E:57:40:1C:3E:57:FC:97
            X509v3 Authority Key Identifier:
                keyid:4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/4754ED7C16BF11EBB31D5A6AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:4a00:5542:3a5::/64

    Signature Algorithm: sha256WithRSAEncryption
         81:a5:45:5c:6a:78:13:36:68:c7:8b:c3:2e:fd:7b:bb:be:ac:
         e9:81:7b:f0:31:87:7d:a4:05:41:56:a7:e7:06:67:f1:4a:fc:
         6d:99:dd:20:8f:a6:fd:fa:4d:3a:f6:db:48:e6:48:6e:9f:c9:
         28:82:cb:2f:5d:af:f4:3d:46:0f:a0:77:1e:4e:9d:27:86:dd:
         c7:ae:bf:11:fc:6a:83:30:03:01:0e:42:44:51:95:f2:4f:d5:
         cd:f9:34:27:45:cf:df:ea:7c:d7:9b:c8:e5:63:d6:cb:6e:6b:
         5d:2e:78:8b:95:af:c9:e1:20:3d:5c:75:b8:82:95:0a:47:10:
         1a:7a:2b:e5:a6:2d:0c:f6:6f:ff:10:0b:15:57:a0:7c:f4:65:
         c9:f5:94:ca:54:7c:22:85:b3:09:90:06:8f:24:9f:89:13:d7:
         b2:4f:95:46:bf:0e:17:25:de:ce:f6:92:f0:1e:74:82:65:28:
         88:f3:ec:24:38:bc:a4:37:e4:11:ff:ef:10:e2:cf:6a:09:2b:
         8e:5c:d6:e4:f4:45:82:31:2f:39:ad:3f:76:37:4b:bf:26:93:
         8c:ff:99:f0:92:84:7b:8c:2a:78:91:df:74:01:fb:01:93:77:
         c1:2e:77:76:42:cd:6a:38:4c:b4:d3:f1:cd:ee:86:79:d3:d0:
         96:8d:85:6c
-----BEGIN CERTIFICATE-----
MIIFdjCCBF6gAwIBAgICM+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDc4MUExMTAvBgNVBAUTKDRENzIzOTU1MjQzQUU4OEQ1NTI0MzlBRjhFNEUwQTA5
QzhGNjU5MEQwHhcNMjQwMzAyMTUyMDU4WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWUzNDNkYS0yYzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvBck2P0u7lJtALzoOHSGkUYPp+rBgg8vBstkRWJdsEYm8MCmNfs5Y20wFkvv
UYfDD7Hf1DKx449M9A+TCcjMRg/uG9QOrgTpliMtBWMMLrgxzaemjOPQN9f2h4uq
RBQK6uIkU13XEGXVu2LyOWdJbNd/QSVF4Go+bi93iKpOi03iDTxMyW9+QRztYzZz
5BUg+XNgYi40dGcX4HD7ExApCPkWcR8zS3LrPYZfM2W0l7Y3Pr9z76hLXepCWoU/
ZdW3L6HLjqaU09YrQBaiAWLTTZhXgzM9LSMG/eFraE1LRx1SeD6HCVZh7O1jQ4Fw
cUUJSbEk9Cd+Ni/8NyXwbdOppQIDAQABo4ICmjCCApYwHQYDVR0OBBYEFIaozcY9
hA+zubR09h5XQBw+V/yXMB8GA1UdIwQYMBaAFE1yOVUkOuiNVSQ5r45OCgnI9lkN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzgxQS9ENTIxNDI3MDFE
OUIxMUUyQjgyMUZEODkwOEIwMkNEMi9UWEk1VlNRNjZJMVZKRG12ams0S0NjajJX
UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RYSTVWU1E2NkkxVkpEbXZqazRLQ2NqMldRMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDc4MUEvRDUyMTQyNzAxRDlCMTFFMkI4MjFGRDg5MDhCMDJDRDIvNDc1NEVEN0Mx
NkJGMTFFQkIzMUQ1QTZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJAYIKwYBBQUHAQcBAf8E
FTATMBEEAgACMAsDCQAkBEoAVUIDpTANBgkqhkiG9w0BAQsFAAOCAQEAgaVFXGp4
EzZox4vDLv17u76s6YF78DGHfaQFQVan5wZn8Ur8bZndII+m/fpNOvbbSOZIbp/J
KILLL12v9D1GD6B3Hk6dJ4bdx66/EfxqgzADAQ5CRFGV8k/Vzfk0J0XP3+p815vI
5WPWy25rXS54i5WvyeEgPVx1uIKVCkcQGnor5aYtDPZv/xALFVegfPRlyfWUylR8
IoWzCZAGjySfiRPXsk+VRr8OFyXezvaS8B50gmUoiPPsJDi8pDfkEf/vEOLPagkr
jlzW5PRFgjEvOa0/djdLvyaTjP+Z8JKEe4wqeJHfdAH7AZN3wS53dkLNajhMtNPx
ze6GedPQlo2FbA==
-----END CERTIFICATE-----
Generated at Wed May 22 16:21:36 2024 by rpki-client on console-ams.rpki-client.org